Line4

2 min readWarningEBA reporting framework 4.2Updated 10 November 2026

Fraudulent payment transactions cannot be negative (Y 04.01, EBA rule v09214_s)

A warning in the payment fraud return (PSD2 fraud reporting), on template Y 04.01, card-based payments transactions reported by the acquiring payment service provider.

Check your file against this ruleWhat to do if it fails

The rule in plain words

Fraudulent payment transactions cannot be negative.

EBA checks it for 52 rows, from card payments acquired (except cards with an e-money function only) (0010) to other (0600). And on six sheets: domestic amount of payment, domestic number of transactions, cross-border within the EEA amount of payments, cross-border within the EEA number of transactions, cross-border outside the EEA amount of payments and cross-border outside the EEA number of transactions. That makes 312 checks. A failure names the one that failed.

How the Line4 Check report words itShow

The first of its checks, word for word as the report shows it when it fails. The others read the same, with their own column, row or sheet.

Fraudulent payment transactions: Counterfeit card, Domestic amount of payment >= 0

What to do if your filing fails it

  1. 01Open the template below and find the cells the rule reads.
  2. 02Look for a value with the wrong sign in these cells, such as an amount entered as a negative number.
  3. 03EBA compares the values exactly here: there is no rounding tolerance.
  4. 04It runs only when your filing indicators mark Y 04.01 as reported.
  5. 05This is a warning. It does not stop the filing on its own, but your authority may ask you to explain it.

The cells it reads

Card-based payments transactions reported by the acquiring payment service provider (Y 04.01)

Rows

  • 0010Card payments acquired (except cards with an e-money function only)
  • 0020Of which initiated non-electronically
  • 0030Of which initiated electronically
  • 0040Of which initiated via remote payment channel
  • 0060Payments with cards with a debit function
  • 0070Payments with cards with a credit or delayed debit function
  • 0080Of which authenticated via strong customer authentication
  • 0100Issuance of a payment order by a fraudster
  • 0110Lost or stolen card
  • 0120Card not received
  • 0130Counterfeit card
  • 0140Card details theft
  • 0150Other
  • 0160Modification of a payment order by the fraudster
  • 0170Manipulation of the payer to make a card payment
  • 0180Of which Authenticated via non-strong customer authentication
  • 0200Issuance of a payment order by a fraudster
  • 0210Lost or stolen card
  • 0220Card not received
  • 0230Counterfeit card
  • 0240Card details theft
  • 0250Other
  • 0260Modification of a payment order by the fraudster
  • 0270Manipulation of the payer to make a card payment
  • 0290Low value (Art.16 RTS)
  • 0300Recurring transaction (Art.14 RTS)
  • 0310Transaction risk analysis (Art.18 RTS)
  • 0320Merchant initiated transactions
  • 0330Others
  • 0340Of which acquired via a non-remote channel
  • 0360Payments with cards with a debit function
  • 0370Payments with cards with a credit or delayed debit function
  • 0380Of which Authenticated via strong customer authentication
  • 0400Issuance of a payment order by a fraudster
  • 0410Lost or stolen card
  • 0420Card not received
  • 0430Counterfeit card
  • 0440Other
  • 0450Modification of a payment order by the fraudster
  • 0460Manipulation of the payer to make a card payment

And 12 more.

Column

  • 0020Fraudulent payment transactions

Sheets

  • 0010Domestic amount of payment
  • 0020Domestic number of transactions
  • 0030Cross-border within the EEA amount of payments
  • 0040Cross-border within the EEA number of transactions
  • 0050Cross-border outside the EEA amount of payments
  • 0060Cross-border outside the EEA number of transactions

A worked example

The first of its checks, with simple numbers.

What the rule then expects

Counterfeit card, fraudulent payment transactions must then be at least 0.

0Passes
-100Fails

A file that reports 0 passes. One that reports -100 fails, by 100.

The numbers are illustrative.

Show the rule as writtenShow

EBA's formula, as written out for the first of its checks. Cells are written as {template, row, column, sheet}.

{Y_04.01,r0230,c0020,s0010} >= 0

The next five:

{Y_04.01,r0020,c0020,s0050} >= 0{Y_04.01,r0340,c0020,s0050} >= 0{Y_04.01,r0250,c0020,s0060} >= 0{Y_04.01,r0040,c0020,s0060} >= 0{Y_04.01,r0060,c0020,s0060} >= 0

And 306 more, the same formula for the other cells it covers.

Every PSD2 fraud reporting rule, by template

Checks like this one, run at the point of submission, are the first step to real-time supervision.